Trace of Frobenius endomorphism of an 
elliptic curve with complex multiplication^ 



By Noburo ISHII 



1. Introduction 



Let K = Q(a/— m) be an imaginary quadratic field, where m is a square- 
free positive integer. Let R be an order of K of conductor /o with a basis 
{l,ti;} over Z. We denote by d{R) and h{R) the discriminant and the class 
number of R respectively. Let / be the smallest positive integer such that 
] \J —m G R. Then we have / = /o/2 (resp. /o) if m = 3 mod 4 and /o is 
even (resp. otherwise). Let E be an elliptic curve with complex multiplica- 
tion by R and denote by j (-E) the j-invariant of E. We may assume that E 
is defined by a Weierstrass equation: = x^ + Ax + B, A, B E F = Q{j{E)). 
First, we introduce the notation used in the foUwing. For an endomorphism 
A of E, the kernel of A is denoted by E[X\. For a prime ideal p of F, we 
denote by ip the relative degree of p over Q. If E has good reduction at 

p, then we denote by Ep the reduction of E modulo p. For a point P of E 
we denote by P~ the reduction of P modulo p. Further we denote by ipp 

the Frobenius endomorphism of Ep and by ap{E) the trace of (pp. By F^, we 

denote the finite field of g-elements. If Ep is defined over Fg, then Ep{¥q) 

denotes the group of Fg-rational points of Ep. 

Now let p be an odd prime number and p a prime ideal of F dividing p. 
Let us assume that p and p satisfy the following condition: 

(1) p splits completely in K , p is prime to f and E has good reduction at p. 

Then by complex multiplication theory (cf. II of Silverman [11]), we know 

that E has ordinary good reduction at p and the endomorphism ring of Ep 
is isomorphic to R (cf. Theorem 12 of 13.4 of Lang [6]). Further K{j{E)) 
is the ring class field of K of conductor /o (cf. §9 of Cox [3]). Since p is of 
relative degree ip, there exist positive integers Up and Vp such that 

4/p =ul + mfvl, {up + VpfV^)/2 e R, {up,p) = 1. 
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By the assumption, we may write ipp = {ap{E) + hp{E)f^^—m)l2 = a + Pu, 

where bp{E), a and P are integers. It is known that the group £'p(Fpfp) is of 
order Np{E) = p^i' + l—ap{E) and is isomorphic to the group Z/ {Np{E) / d)Z(B 
Tj/dTj, where d is the greatest common divisor of a — 1 and (3. On the 
other hand, if d{R) < —4, then we have easily ap{E) = epUp, where ep = 
1 or — 1. It is easy to find Up for a given number 4p^f such that 4p^p = 
Up + mpVp, {up,p) = 1. Therefore if we determine ep, then we can compute 
the numbers Np{E) and d rapidly. The problem to detemine ep in the case 
h{R) = 1 has been solved by A.R. Rajwade, A. Joux-F. Morain and others. 
See A. Joux and F. Morain[5] for the references of their results. In the case 
h{R) = 2, this problem is solved only for one case of the order of discriminant 
—20, by F. Leprevost and F. Morain [7], using the results of B.W. Brewer 
[1,2] for the character sum of Dickson polynomial of degree 5. 

The purpose of this article is to determine ep for an elliptic curves E 
having complex multiplication by R and for prime ideals p of F satisftying 
(1), where R are orders such that h{R) = 2 or 3 and mp is divided by at 
least one of 3,4 and 5. Thus R are orders of discriminant 

d{R) = - 15, -20, -24, -32, -35, -36, -40, -48, -51, -60, -64, -72, -75, 
- 99, -100, -108, -112, -115, -123, -147, -235, -243, -267. 

Further we assume that j{E) is real to avoid tedious argument. 

Our idea to solve the problem is as follows (for details see §2). Let s be a 
divisor of pm and assume s > 3. We find a F-rational cyclic subgroup Cs of 
E[f^/^^rrl\ of order s and take a generator Q of Cg. Consider the Frobenius 
isomorphism of cTp of p. Then F-rationality of Cg shows Q'^'^ = [rp\{Q) for an 

integer Vp. Using G Ep[f^y—m\ and (Q'^O"" = V^p(Q~)) "we have 

[2]i[rpmr = im^T = mMQn 

= [{ap{E) + bp{E)fV^)]{Q-) = [apiE)]{Q-). 

This shows that ap{E) = 2rp mod s. Therefore the number ep is determined 
by the condition epUp = 2rp mod s. This argument reduces our original 
problem to a problem of finding a point Q and of determining Vp for a given 
prime ideal p. In §2, we give auxiliary results to find the cyclic sbgroup Cg and 
a generator Q. If s is an odd prime number, then we show, in Proposition El 
of §2, that the s-division polynomial \E's(a;, i?) of E has a unique F-rational 
factor Hi e{x) of degree [s — l)/2 and that the point Q is obtainable from a 
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solution of Hi^e{x) = 0. In §3 we determine Vp for the case pm is divided 
by 3 or 4 and in §4 for the case /^m is divided by 5. Though we deal with a 
specified elliptic curve E for each order R, a similar result is easily obtained 
for any elliptic curve E' of the j-invariant j{E), because E' is a quadratic 
twist of E and ap{E') is the product of ap{E) and the value at p of the 
character corresponding to the twist. 

In the following, we assume any elliptic curve is defined by a short Weier- 
strass equation. 

2. The subgroups of E[fy/—m\ and decomposition of division polynomials 

2.1. Let E be an elliptic curve with complex multiplication by R. By the 
definition of /, we have j^—m e R. 

Proposition 1. The group E[f^/—'m\ is cyclic of order pm. 

Proof. By Proposition 2.1 of Lenstra [8], we know E[f^/—m] is isomorphic 
to R/ f\/—mR. Let / be odd and m = 3 mod 4. Then R — Z©/a;Z, where 
a; = (1 + x/=m)/2. Further f^/^iR = f{2u - 1)Z © f^{uj - (m + 1)/2)Z. 
Put ^ = fu- fimf + l)/2 e f^f^R. Then we have f{2uj - 1) = 2^ + 
m/2, /2(cj - (m + l)/2) = + (/ - l)/^m/2. This shows that {f^m, ^} is 
a basis of f\/—mR over Z. Since is a basis of R over Z, Rj f ^ —mR 

is a cyclic group of order /^m. The assertion for the other cases is easily 
obtained. □ 

Lemma 1. Let r he a fixed prime number. Then there exist infinitely many 
prime numbers of the form v? + v^f^m, where u and v are integers and v is 
prime to r. 

Proof. Consider the ideal groups Go and Pq of K such that 

Go = {a I a is prime to 2r/m}, Pq = {{a) | a = 1 mod 2rf\/—m}. 

Then Pq is a subgroup of Gq of finite index and by Tshebotarefi^'s density 
theorm, in each factor class there exist infinitely many prime ideals of degree 
1. Let — uq + VQf\/—m such that ideal (7) G Go and ^0,^0 G Z and 
further vq is prime to r. Then every integral ideal of the class (7)-Po has a 
generator of the form ui + v\f\J—m ( x^i, v\ e Z, r f v\). Thus we have our 
assertion. □ 

In the following, let p be an odd prime number and p a prime ideal of F 
dividing p and assume that p and p satisfy the condition (1). 
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Lemma 2. Let s be an odd prime number dividing f'^m. Let q = p^f . Assume 
that q = + v'^f^m, {v,ps) = 1 or Aq = u"^ + v'^f'^m, {v,2sp) = l. Then we 
have 

E,[s] n ip[/v^] \ {0} = {P= {a, (3) e E,[s] \ s \ [F,(«) : F,]}, 
where : Fg] denotes the degree of the field ¥q{a) overWg. 

Proof. By the assumption, Ep is defined over Fg. First we assume the Frobe- 
nius endomorphism (pp is given by (pp = {u + f /-\/^^?7i)/2, if necessary, after 



replacing u by —u or v by —v. Let P = {a, (3) G Ep[s]. If P G Ep[f^^—m\, 
then, for h = (s - l)/2, we have (^^([2'^](P)) = [u'']{P). Since 2^,u'' = ±1 
mod s, we have v^p(P) = ±P. This shows [Fg(Q;) : Fg] < (s — l)/2. Conver- 

sly let P = {a,p) G ip[s],s f A; = [¥g{a) : Fg] and r = g^ Since (/?^(P) = 
(a'-,/?'^) = (a,/?*^) = eP (e = ±l),we have [{u + vf^^)l2f - e](P) = 0. 

Since P G -Ep[s] and s|/^m, we have [{u^ — 2^e) + ku^~^v f s/ —m]{P) = and 
[(^fc - 2*^e)2 + (fcM'=-iw)V^m](P) = 0. Thus [{u'' - 2''ef]{P) = 0. Since the 
order of P is s, we see [(u*"' — 2'^e)](P) = and [ku''~^vfy/—m] (P) = 0. 
By the assumption, k, u and f are prime to s. Therefore we conclude 

[/a/— m](P) = 0. Hence P G -Epf/V^"^]- the case ipp = u + vj\/—m., the 
same argument holds true. □ 

Corollary 1. Let \l's(x, Pp) be the s-division polynomial of Ep. Then we 

know "^six, Ep) is the product of two ¥q-rational polynomials hi{x) and h2{x) 
such that hi{x) is of degree {s — l)/2 and the degree of every irreducible factor 
of h2{x) is divided by s. Further the solutions of hi{x) = consist of all 



distinct x-coordinates of non-zero points in Ep[s] fl Ep[fy/~m] . 

Proof. Since p is prime to /^m, by Proposition d Ep[s] f] Ep[f — m] is a Fg- 
rational cyclic group of order s. Thus if we put hi{x) = Yl^{x — a), where a 



runs over all distinct a;-coordinates of non-zero points in Ep[s] fl Ep[f^/—m], 
then hi{x) is Fg-rational and of degree [s — l)/2. The assertion for h2{x) 
follows immediately from Lemma |21 □ 

Lemma 3. Let 4:\f^m and q = p^'' = + v'^f'^m, {v,2) = 1. Let Qi be 
an point of order 4 of Ep [fy/—m\ and Q2 a point of Ep such that [2]{Qi) = 
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[2](Q2) andQ2^^Qi- Then the x- coordinates Xi and X2 of Qi and Q2 are 

all ¥g-rational solutions of '^4{x, Ep)/y = 0. Furthermore let y"^ = h{x) be 

the equation of Ep. Assume that (fp = u + vfy/—m. Then, of two elements 
Xi and X2, only X I satisfies the relation {h{xi)/p) = {— , where ( /p) 
denotes the Legendre symbol for p. 

Proof. Since Ep[f y/ —m] is Fg-rational, we see xi and X2 are Fg -rational. Let 
a be a Fg-rational root of '^4,{x, Ep)/y = and put S = (a, P). Then S* is a 
4-division point of Ep and we have 

^p{S) = [u + vfV^]iS) = (a", Z^") = {a, ±P) = [e]iS), {e = ±1). 

Thus we have [{u — e)+vf^/—m]{S) = 0. This shows [{u — ey + v'^f'^m]{S) = 
0. Since the order of S" is 4, m — e is divided by 2. Thus [f ^/ —m]{[2]S) = 0. 

Since [2]((5i) is the only one point of degree 2 in Ep[f^y—m\, we have [2]{S) = 
[2]{Qi). This shows that S equals to one of ±Qi and ±Q2- Therefore a equals 

to Xi or X2- Let P = {x,y) be a point of Ep of order 4 such that x G F,. 
Then 

iPpiP) = ix^,y^) = ix,yhixY^-'^/') 

= mx)/p)]iP) = M(p) + [vfv^]iP). 



Therefore we have {h{x)/p) = u mod 4 if and only if P G Ep[f \/ —m]. □ 

2.2. Let s be a positive divisor of /^m and s > 3. By Proposition ^ 
there exists a unique subgroup Cg of E[fyJ—m\ of order s. Let Q = (xg, yq) 
be a generator of Cs- Consider the fields L = F{xq) and M = F{Q). 
Since E[f^J—m\ is F-rational, Cg is F-rational and the field M is an abelian 
extension over F. By class field theory, the Galois group G of M over F is 
isomorphic to an ideal class group of F. For an ideal class € G C5, let erg; 
be the isomorphism of (S corresponding to C Then we have 

Theorem 1. Let €. be the class represented by p and Q'^'^ = [re;](Q). Then we 
have ap{E) = 2r(r mod s. Further if ap{E) is even, then we have ap{E)/2 = 
r(f mod s. 
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Proof. Let ip^ = (a^iE) + \{E)f^/^)/2. Since {Q^^Y = </?p(Q~), we see 
[2]([rc](Q)r = [2](Q-^r = [2K(Q^) 

= [{a,{E) + b,{E)fV^)]{Q-) = [a,{E)]{Q-). 

Since p is prime to s, is of order s. Thus ap{E) = 2rir mod s. If ap{E) 
is even, then yjp = (ap(ii^)/2) + {bp{E)/2)f\/—m. By a similar argument we 
have [ap(£')/2]((5~) = [?"c](<5)- This shows the remaining assertion. □ 

Proposition 2. Let s be an odd prime number of f'^m. If p^f = 1 mod s, 

then 

ap{E) = 2{yl/p) mod s 

Proof. Since we have 4p^'' = ap(i?)^ + bp{EY f'^m, Theorem ^ shows that 
re; = ±1 mod s. Thus G Fg. By the similar argument in the last part 
of Lemma El we have our assertion. □ 

Proposition 3. Let s be an odd prime divisor of f^m and i?) the s- 

division polynomial of E. Then \l/<j(x, is the product of two F-rational 
polynomials Hi^e{x) and H2^e{x) such that Hi^e{x) is of degree (s — 1)/2 and 
every irreducible factor of H2^e{x) is of degree s. Further the solutions of 
Hi^e{x) = consist of all distinct x-coordinates of non-zero points of Cs- 

Proof. Let Hi^e{x) = ~ where t runs over all distinct x-coordinates 

t 

of non-zero points of Cg. Since Cg is F-rational, we see Hi e{x) is F-rational 
of order (s — 1)/2 and clearly it divides \l/s(x, E). By Lemma^ we can choose 
an odd prime p and a prime ideal p dividing p such that they satisfy (1) and 
p is of the form p = u"^ + v'^f'^m, [v, s) = 1, and further the reduction of 

"^six, E) modulo p is equal to \l/s(x, Ep). Take a point P E E[s\\Cs and put 
Q = [f^y-m\{P). Clearly, we have Q e E[fy/-m\ and E[s] =< P > © < 
Q >. Let Gi be the Galois group of F{E[s]) over F. By the representation 
of Gi on E[s] with the basis {P, Q}, Gi is identified with a subgroup of the 
group 

° ' ae¥^,be¥. 



^° ' \b ±a 
Consider the subgroups of Gq: 



H 



a 
±a 



a G , N 



1 
b 1 



be¥. 
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Then we see Gq = HN, Go> N and H H N = {I2}, where I2 is the unit 
matrix. Since the order of is s and s is prime, we know that Gi D or 
Gi n = {12}- Let fl be the set of all subgroups of order s of E[s]. Then 
Q consists of s + 1 elements and Gi operates on Q. By Corollary 1, the 
degree of every irreducible factor of H2^e{,x) = "^six, E)/Hi^e{x) is divided 
by s. Thus we know Cg is one and the only one fixed point of Gi. First 
let us consider the case Gi D N. Then we have Gi = HiN, Hi = H n Gi. 
Since Hi is the fixed subgroup of < P >, the orbit of < P > consists of s 
elements. Therefore Q decomposes into two orbits. In particular, for each 
n, 1 < n < {s — l)/2, the x-coordinate of [n]P has s conjugates over F. 
Thus every irreducible factor of H2^e{x) is of degree s. Next consider the 
case Gi n = {12}- Then the order of Gi is a divisor of 2(s — 1) and is 

prime to s. Since the order of a matrix ( ^ ] , (6 7^ 0) is divided by s, Gi 



b a 

dose not contain the matrices of this form. Therefore there exists a A G 
such that Gi is contained in the subgroup 



1 
A -1 



This shows < P + {\/2)Q > is a fixed point. Thus we have a contradiction. 

□ 

Proposition 4. Let 4|/^m. IfQ is a point of order A in E[fy/—m] and T is 
a poinf of E such that [2]{Q) = [2](T) and T 7^ iQ, then the x-coordinates 
xq and xt of Q andT are all F -rational solutions of '$4{x, E)/y = 0. 

Proof. Using Lemma |H1 instead of Lemma |2l and tracing the argument in the 
first part of Proposition |21 we have the assertion. □ 

In §4, to study the ideal class groups of F corresponding to the fields L 
and M, we must determine conductors fi and fj\/ of abelian extensions L and 
M over F. In next lemma, we shall give some results for the conductors. For 
a prime ideal q and an integral ideal a of F, we denote by eq(a) the maximal 
integer m such that m > and dividing a. 

Lemma 4. Let Q be a point of E of order s. Assume that s is an odd 
prime number, s > 3 and Q generates a F -rational subgroup < Q >. Let 
L,M,fL and be as above. If q is a prime ideal of F prime to (2s), then 
^qifi) < eq(fA/) and eq(fM) > implies eq(f2,) > 0. Further if E has good 
reduction at q, then eq(fAf) = 0. 
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Proof. Since L is a subfield of M, we have eq(fL) < eq(fM)- If E has good 
reduction at q, then Neron-Ogg-Shafarevich criterion (cf. Proposition 4.1 of 
VII of Silverman [10]) shows that eq(fM) = 0. We shall prove eq(fAf) > 
implies eq(fL) > 0. Assume that eq(fM) > and eq(fL) = 0, thus, assume 
that q is ramified in M and is unramified in L. Let be a prime ideal of M 
dividing q and M^j the completion of M with respect to 0. Further we denote 

by kM the residue field of 0. Let Eq, Ei and Ens be the groups defined in VII 
of Silverman [10]. Since E has additive reduction at q, by Theorem 6.1 of VII 
of [10] we have [E^M^i) : Eq^Mq)] = w < 4. Since Q has order s, by replacing 
Q by [w]Q if necessary, we can assume that Q G Eq{Mq). Let a be a non 
trivial element of inertia group of £}. Then since Xq = xq, we have Q'^ = —Q. 
By considering the reduction modulo q, we have Q~ = —Q^. Therefore 

G Ensiku) and [2](Q~) = 0. Since the characteristic of ku is prime to 
2, Proposition 5.1 of VII of [10] shows Q~ = 0. Therefore by Proposition 2.1 
of VII of [10] , we know Q G Ei{Mq). Consequently, by Proposition 3.1 of 
VII of [10], we have Q = 0. This contradicts that Q 7^ 0. □ 

Finally for s = 3, 4, 5, we list s-division polynomials \E's(x, E): 

' ^3 (x, E) = 3x^ + GAx"^ + 12Bx - , 

E) = 2y{2x^ + lOAx^ + mBx^ - lOA^a;^ - SABx - 16B^ - 2A^), 
^5(x, E) = 5x^2 + 62Ax^° + 3805x9 - lOSA^x® + 240 ABx'^ 

-(300^3 + 240B^)x^ - 696A'^Bx^ - {125A* + 1920AB^)x^ 
-(1600^3 + SOBA^)x^ - {50A^ + 240A^B^)x^ 
-{640AB^ + 100A^B)x + A^ - 32B'^A^ - 2565^ 

3. The case /^m is divided by 3 or 4 

Let s = 3 or 4. Assume that s|/^m. Let Q = {xQ,yQ) be a point of 
E[f\/—rn\ of order s . By Propositions 121 and we know xq G F. We may 
write Hq = w'^aE such that w G F^ , a^; is an integer of F and ideal(a;) has 
no square factors. In the following, let p be an odd prime number and p a 
prime ideal of F dividing p and assume they satisfy the condition (1). Then 
there exist positive integers Up and Vp such that 4p^p = + mpv^, {up + 
Vpf^/—m)/2 G R, {up,p) = 1. If Up is even, then clearly we have = 
iup/2y + mp{vp/2Y. 
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Theorem 2. Let Up and Vp be as above. If we choose Cp G {±1} such that 
ep{Up/2) = («£;/p) mod s, then we have ap{E) = tpUp. 

Proof. Since F{Q) = F{^/E^), we have Q"^ = [(aij/p)](Q). Thus by Theo- 
rem Q we have our assertion. It is noted that Up can be odd only in the case 
s = 3. □ 

Let Eq be an elhptic curve defined by a Weierstrass equation: = + 
Aqx + -Bo (^0; E F). If Eq is isomorphic to E over an extension Fq over 
F, then there exists an element 5 G -Fq such that Aq = S^A, Bq = 6^B. 
Since j{E) ^ 0, 1728, we know that A, B, Aq and Bq are not and 5^ G F. 
Therefore we may put = S^aE. In particular we obtain 

Theorem 3. Let E* be the twist of E defined by the equation y"^ = + 
Aa\ + Ba%. Further assume that E* has good reduction at p. Let Up and Vp 
be as above. If we choose ep G {±1} such that ep{up/2) = 1 mod s, then we 
have ap{E*) = epUp. 

The j-invariants of elliptic curves with complex multiplication by R are 
solutions of the class equation H\d(R)\{x) = of discrimint d{R) (cf. §13 of 
Cox [3] for the class equations). In the following, we shall use the table of 
class equations prepared by M.Kaneko. We shall gives a canonical elliptic 
curve E with complex multiplication by R and compute a^; in subsections 
3.1 and 3.2 for the cases s = 3 and 4 respectively. 

3.1. The case s = 3 

We shall explain the process to obtain a canonical elliptic curve E in the 
case d{R) = -15. At first we take a solution ji = (-191025 + 85995y5)/2 
of the equation: 

Hi5{x) =x^ + 191025X - 121287375 = 0. 
Let El be the elliptic curve defined by the equation: 

y"^ = x^ + Aix + Bi, Ai = -1/48 -36/(ji- 1728), fii = l/864 + 2/(ji -1728). 

Then the j-invariant of Ei is equal to ji. By considering twists of Ei by 
elements ^/n, n E F = Q(\/5), we find an elliptic curve E such that coeffi- 
cients A and B of an equation y"^ = x^ + Ax + B of E are integers of F and 
further the absolute value of the norm of the square factor of A is as small 
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as possible. In this case, we take n = 2237(4 + V5)/{V5{4: - Therefore 
we see A = Ain^ = 105 + 48^5, B = Bin^ = -784 - 350^ and 

'^3{E,x) = 3(a;3 + 6x^ + 3A/5a;2 + (291 + 132A/5)x+590+265\/5)(x-6-3V5). 

This shows xq ^ 6 + 3^5 and y| = 2^((1 + V5)/2)^^ Finally we have 

Proposition 5. Let E he the elliptic curve defined by the equation 

= x^+ (105 + 48V5)x - 784 - 350^5. 

Then E has complex multiplication by the order of discriminant —15. Further 
we have ckb = (1 + -\/5)/2. 

Note 1. For another root j2 = (-191025 - 85995 V5)/2 of Hi5{x) = 0, we 
consider the conjugate elliptic curve E of E overQ and put a-^— (1 — -\/5)/2. 

Example 1. 

(1) Let p = 61. Then (-15/p) = (5/p) = 1. Thus = 1. Choose the 
prime ideal p such that p 3 \/5 — 26. Since (ag/p) = (54/61) = — 1 and 
4p = 2^ + 4^15, ap{E) = -2. 

(2) Let p = 83. Then (-15/p) = 1, (5/p) = -1. Thus ip = 2. Since 
{aElip)) = -1 and 4p2 = 1542 + IG^ • 15, a(p) = 154. 

For other cases, we give only results and deta nacessary to obtain the 
results. For each order R, the data consits of the class polynomial H\cL{r)\{x), 
a solution j of H\fi{R)\ = 0, coefficients A and of a Weierstrass equation 
of an elliptic curve E with j{E) = j, xq, yg and aE- We list them in the 
foUwing format: 



d{R) 


H\d{R)\{x) 




j 




A, B 




XQ, Vq 




OiE 
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The results and data for the case h{R) = 2 



-24 


- 4834944a; + 14670139392 




2417472 + 1707264V2 




-21 + 12^2, - 28 + 22^2 




-3 + 3V2, 2(1 - V2)^(l + \/2) 




1 + V2 


-36 


- 153542016a; - 1790957481984 




76771008 + 44330496^3 




-120 - 42^3, 448 + 336^3 




3 + 3^3, 4(2 + ^3)2(1 + ^3) 




1 + \/3 


-48 


- 2835810000X + 6549518250000 




1417905000 + 818626500V3 




-1035 - 240V3, 12122 + 5280\/3 




-9 + 18V3, 4(2 - V3)^(l - 2V3)2(8 + 6^3) 




8 + 6^3 


-51 


x^ + 5541101568X + 6262062317568 




-2770550784 - 671956992^17 




-60 - I2V17, - 210 - 56\/l7 








-2 


-60 


x^ - 37018076625a; + 153173312762625 




(37018076625 + 16554983445 V5)/2 




(-645 + 20lV5)/2, 1694 -924^5 




-(45 - 15V5)/2, - ((1 - V5)/2)i6 




-1 


-72 


x2 - 377674768000X + 232381513792000000 




188837384000 + 77092288000^6, 




-470 - 360^6, 19208 + 10080^6 




6 + 9V6, 4(5-2^6)2(2 + ^6) 




2 + V6 


-75 


^2 + 654403829760,T + 5209253090426880 




-327201914880 + 146329141248^5 




-2160 + 408^5, 42130 - 10472^5 




-(15 + 21^5), (-25 - 13V5)(4 - V5)2((l + V5)/2))i4 




-25 - 13V5 
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-99 


a;2 _^ 37616060956672,T - 56171326053810176 


-18808030478336 + 3274057859072\/33 


-45012 + 7836\/33 - 5198438 + 904932\/33 


-f87-15\/33) -2 


-2 


-123 


X- + 135 11 168 10576 • lO'lr + 1 1880959 1175 188 • 10'^ 


-677073420288000 + 105741103104000\/41 


-960 + 120^41, - 13314 + 2240^41 


-24, -2(32 + 5^41)^ 


-2 


-147 


+ 34848505552896 • 10=^x + 11356800389480448 • 10^ 


-1712 1252776118000 + 380228367971 1000 v/21 


-2520 - 240^21, - 31724 - 11418\/21 


63 + 9V21, (7- V21)((5 + V21)/2)^ 


7- \/21 


-267 


+ 19683091854079488 • lO^a; + 531429662672621376897024 • 10*^ 


-9841545927039744000000 + 1043201781864732672000V89 


-37500 + 3180V89, 3250002 - 371000V89 


150, 2(500 + 53^89)2 


2 


The results and data for the case h{R) = 3 


-108 


- 151013228706 • Wx^ + 224179462188 • lO^x 
- 1879994705688 • 10^ 


31710790944000^/4 + 39953093016000v/2 + 50337742902000 


105v/4 - 90v/2 - 135, - 738v/4 + 738^^2 + 526 


9 - 3^2, 4(1 - ^2)8(-l + ^2) 


-1 + ^2 


-243 


x^ + 1855762905734664192 • lO^x^ - 3750657365033091072 • lO^x 
+3338586724673519616 • 10^ 


-618587635244888064000 - 428904711070941184000^/3 

-297385917043138560000 


-1560 + 720v^9, 32258 - 11124 v/3 - 7704^9 


42-18v^9, (-2 + s/9)S(-4 + 2^9) 


-4 + 2^9 
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3.2. The case s = 4 



In this case, by Lemma El and Proposition HI we know that xq is one 
of two F-rational solutions of '^^{x,E)/y = satisfying the condition given 
in the last part of Lemma 01 We shall explain the case d{R) = —32. We 
take a solution j = 26125000 + 18473000 of 1/32(0;) = - 52250000x + 
12167000000 = and consider an elliptic curve E with j{E) = j, defined by 
an equation: 

= x^ + Ax + B {A = -105 - 90^2, 5 = 630 + 518^2). 

Then ^1^4(0;, E) /y = has two F-rational solutions Xi = 3 + 5-\/2, X2 = 9 — \/2. 
Consider a prime number p = 17 = 3^ + 2^2 and a prime ideal p = (l-3v^). 

Then by counting the number of points of Ep{¥p), we know ap{E) = —6. 
Since (x? + Axi + B/p) = (-3 + 3v^/p) = (-2/17) = 1 = (-l)('*p(^)/2-i), 
we see xq = xi. Calculating j/g, we may obtain a^; = — 3 + 3^/2. For the 
cases d{R) = —64, —112, we know the class polynomials are: 

Hq^{x) =x^ - 82226316240X - 7367066619912, 
Hii2{x) = x2 - 274917323970000X+ 1337635747140890625. 

In these cases by similar argument we have (£',«£;). We list our results in 
the next propositon. 



Proposition 6. 



d{R) 


3{E) 


A 
B 




-32 


26125000 + 18473000^2 


-105 - 90^2 
630 + 518V^ 


-3 + 3^2 


-64 


41113158120 + 29071392966^2 


-91-60^2 
462 + 308^2 


V2- 1 


-112 


137458661985000 

+ 51954490735875^7 


-725 - 240^7 
9520 + 3698^7 


1 



4. The case mp is divided by 5 



We shall consider the orders R of discriminant d{R) = -20,-35,-40, 
— 115, —235. These orders R are maximal and of class number 2. Further 
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for any R, we know F = Q(^/5). For a given order R, we consider an elliptic 
curve E, defined over F, with complex multiplication by R. Proposition El 
shows that \l/5(a;, i?) has only one F-rational factor Hi e{x) of degree 2 and 
for any solution Xi of Hi e{x) = 0, a point Q of E with xq = Xi is a generator 
of the group C5. Let L = F{xq) and M = F{Q). For a prime number p 
satisfying p^'^ = 1 mod 5, our problem is rather easy (cf. Proposition El) . 
For a prime number p satisfying = 4 mod 5 and a prime ideal p dividing 
p, to determine rp, we must study the ideal class groups of F corresponding 
to the fields L and M. Regarding conductors of L and M, we have a following 
result. In Proposition [71 we shall use the notation in §2. 

Proposition 7. Let q be a prime ideal of F prime to (2\/5). Then eq(fL) = 
eq(fA/) andcc^^fM) < 1- Further if E has good reduction atq, then e^{^M) = 0. 

Proof. Since M is a cyclic extension of degree 4 over F, we have eq(fM) < 1 
(cf. Serre [9]). The other assertions are deduced from Lemma El □ 

As for the prime ideal (\/5), we have e(^)(fi) < ^(^-^^{^m) < 1- Propo- 
sition 7 shows, to avoid tedious computation in determining class groups, 
it is necessary to choose an elliptic curve E such that the number of prime 
factors of its discriminant is as small as possible. We shall explain the case 
d{R) = —235, because the other cases can be deduced from similar but much 
easier argument. We have 

H235{x) =x^ + 82317741944942592 ■ lO^x + 11946621170462723407872 • lOl 
First we take a solution 

j = -411588709724712960000 - 184068066743177379840v^ 

of H235{X) = 0. 

We consider an elliptic curve E defined by an equation: y"^ = x^ + 
(-15510 + 2068V5)a; + (3200841 - 649446\/5)/4. The discriminant of E 
is 47^2-^6-^2^ j{E) = j and 

Hi^e{x) = lOx^ + (3525 - 2115y5)x + 624160 - 262918^5, 

where e = (1 + v^)/2. By solving the equation Hi^e{x) = 0, we obtain a 
generator Q of C5 given by 

XQ = 3e-H + 47e-^72, vq = (2v^ei°)- V 
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, where t = V4775e^ and n = 4:7e~\2115 - (211 + 23^5)^). In partic- 
ular we have L = F{t) and M = L{tt). Next we shall determine conductors 
and ideal class groups of L and M. Since the maximal order of L has a basis 
{1, (1 + e~^t)/2} over the maximal order of F, the discrimant of L over F 
is {e^^ty. This shows that = (47-\/5). Since M is real and a conjugate 
field of M over Q is imaginary, Proposition [7| shows fjvf = (2^^ ■ 47-\/5)oo2, 
where fcGZ, 0<A;<2 and 002 is the infinite place of F corresponding 
to the conjugate embedding of F to Q. We have only to determine the 2- 
exponent k. See §3 of Hiramatsu and Ishii [4] for a method to calculate the 
2-exponent of conductors. For a moment, we assume M is defined modulo 
(4-47\/5)oo2. Let ^ be the ray class group of F modulo (4-47\/5)oo2. Denote 
by and the subgroups of ^ corresponding to L and M respectively. 
Consider the ideal classes g, 6 and [ of ^ represented by the principal ideals 
((l + 3\/5)/2),(46 + 47\/5) and (471) respectively. Then we see q is of order 
276 and both t and [ are of order 2. Further we have: 

*P =< Q>x<t>x<l> (a direct product). 

Let ^1 be the ray class group modulo (47-\/5) and 9 the canonical morphism 
of ^ to Then ^1 is a cyclic group generated by 9{q) of order 138 and 
Ker(^) =< g^^^t,l >. Since h = (47^5), 3 Ker(^). This shows that 

=< Q^, i, [ >. Next we shall determine %^m- Let ^ be the homomorphism 
of ^ to itself defined by ^(a) = a^^. Then ^ induces an isomorphism of ^/^^m 
to ^(<P)/^(*Pm)- Consider the prime numbers qi = 251 = 4^+235, q2 = 431 = 
142 + 235 and qs = 239 = 2^ + 235 and prime ideals qi = (16 + ^5), q2 = 
((43 + 5-\/5)/2) and qa = ((31 + a/5) /2) of F dividing gi, q2 and q^ respectively. 
In the following, for a prime ideal q of F, we denote by C(q) the class of ^ 
represented by q^^. Then we know C(qi),C(q2) and C^q^) belong to H, t 
and ^(3)6 respectively. By counting the number of rational points of the 
reduced elliptic curve of E modulo q^, we have aqi(-E) = —8,ac^^{E) = —28 
and ac^^{E) = —4. Therefore, by Theorem[TJ we know t, I G and the class 
^{g)t corresponds to the isomorphism A such that Q'^ = [3]{Q). Since '^m is a 
subgroup of of index 2, we conclude that =< g'^, t, I >. In particular, 

does not contain the kernel < g^^^t, [ > of the canonical morphism of ^ 
to the ray class group modulo (2 ■ A7V5)oo2- Therefore fM = (4 ■ 47\/5)oo2. 
We know the class m = ^(q) is represented by the ideal (743 + 756^^5). 
Consequently we have 

Theorem 4. Let t, I and m be the classes of *P represented by the ideals 
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(46 + 47^5), (471) and (743 + 756v^) respectively. Put 6 m, I > and 

2) =< 6, [ >. Letp he an odd prime number andp a prime ideal of F dividing 
p and assume that they satisfy (1). Furthermore, letUp andvp be the positive 
integers such that 4]?^"' = Up + 235Vp and {up,p) = 1. If the class C(p) of p^^ 
belongs to m*2) (0 < i < 3), and €p e {±1} is chosen such that epUp = 2-3' 
mod 5, then we have ap{E) — epUp. 

Note 2. C(p) e S) U m^D if and only ifp^<- = 1 mod 5. 

Example 1. (i) Let p = 239 = 2^ + 235 and p = ((31 + V5)/2). Then 
C(p) = mfi e xnD and ap(E) = -4. 

(ii) Let p = 241 = (27^ + 235)/4 and p = ((33 + 5V5)/2). Then C(p) = 
I e D and ap{E) = 27. 

(hi) Letp = 719 = 222 + 235 andp = ((59 + ll\/5)/2). Then C(p) = m^H e 
m^D and ap{E) = 44. 

We shaU give the data and resuhs for other cases. In the below, put 

tm = \J fnj (a/Sc) and denote by ^ the ray class group of conductor fjv/ of F . 
Further, we denote by p and p an odd prime number and a prime ideal of F 
dividing p such that they satisfy the condition (1) for the given elliptic curve 
E. 

(I) The case m = 5, d{R) = -20 

' H2q{x) =x^ - 1264000,T - 681472000, j(E) = 632000 + 282880\/5, 
/I = -50/3 -5^5, = 100/3 + 280^5/27, 
< xq = 56^/6 + tm, Vq = (V5)(e + tm)^/TTt^, 
L = F{tm), M = L (yr+t^) , ]l = (4^5), fM = (8^5), 

=< 5l > X < 52 >, =< S?, 02 >, =< 0?02 >, 

where gi and 02 are the classes of order of 4 and 2 represented by the ideals 
((21 + \/5)/2) and (11 + 2^5). 

Proposition 8. Let Up and Vp be the positive integers such that p^f — u^-\- 
5Vp, {up,p) = 1. Choose ep G {±1} such that epUp = 2* mod 5 if the class 
of p belongs to q\^m (0 < i < 3). Then we have ap{E) — 2epUp. 
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Choosing a suitable generator of p, p is written in a form p — — 5b^, 
where a and b are integers satisfying the condition: 



17 mod 20 
1 mod 20 

! mod 4 
I mod 4 



if p = 4 mod 5 
if p = 1 mod 5, 

if p = 5 mod 8 
if p = 1 mod 8. 



For i = 1,2, let Pi = af — 5bf be the prime numbers represented as above. 
If pi = p2 mod 40, then prime ideals (ai + bi\/5) and (02 + &2\/5) belong 
to the same class of ^ if and only if ai — 02 + 5(6i — 62) = mod 40. Let 
T =< dl >■ Then we see if p = 1 (resp. 9, 21, 29) mod 40, then the class 
C(p) of the prime ideal p = (a + 6\/5) belongs to 1, (resp. Q2Qi'^, Q2^, Qi^) 
and furthermore C(p) € Pm if and only if a+5b = l(resp. —3, 11, 7) mod 40. 
Therefore we have 



Proposition 9. Let p = + 5f ^ 



56^, where u and b are positive 



integers and a, and b are integers satisfying the above condition. Then if we 
choose Cp e {±l}such that 



€t,U 



'(_l){a+56-i)/20^ mods ^fp 

(_l){a+5fe+3)/20^ mod 5 «/p 

(_l)(a+5fe-ii)/20Q mod 5 tfp 

(_l)(a+56-7)/20Q mod 5 if p 

then we have ap{E) — 2epU. 

(II) The case m = 35, d{R) = -35 



1 mod 40, 

9 mod 40, 

21 mod 40, 

29 mod 40, 



'H^^ix) = + 117964800X - 134217728000, 
j{E) = -58982400 - 26378240^5, 
A = -70v^/3, B = (13475 + 980v^)/108, 

, XQ = (35e - 3i^)/6e2, yg = {tl/2e'')^ V5 - (9 + V5){etm)-\ 
L = F{tJ, M = L (^^v^-(9 + V5)(et^)-i^ , 
h = (7^5), fM = (14y5cx)2), 
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where f) is the class of order 12 represented by the ideal (6 + -\/5) . 

Proposition 10. Let Up and Vp be the positive integers such that 4]?^"' = 
Up + S5Vp, {up,p) — 1. Choose ep e {±1} such that epUp = 2-3' mod 5 if 
the class of p belongs to 1)''^m (0 < i < 3). Then we have ap{E) — epUp. 

(III) The case m = 10, d{R) = -40 

'Hio{x) =x^ - 425692800X + 9103145472000, 
j{E) = 212846400 + 95178240^5, 
A = -125 + 15^5, B = -200 + 240^5, 

, XQ = (10e + t^)/e2, VQ = 2e-Hm^l5e-^ + (40 - llV5)t-\ 
L = F(0, M^L (^^15e-i + (40-llv^)t-i^ , 
h = (8\/5), fM = (16^002, 

=< > X < > X < [ >, =< f), I >, q^M =< f), t >, 

where g, {) and [ are the classes of order 4, 4 and 2 represented by the ideals 
(6 + V5),((53 + 3V5)/2) and ((37 + 7V5)/2) respectively 

Proposition 11. Let Up and Vp be the positive integers such that p^f = 
Up + lOfp, {up,p) = 1. Choose Cp G {±1} such that epUp = 2* mod 5 if the 
class of p belongs to q^'^m (0 < i < 3). Then we have ap{E) = 2epUp. 

(IV) The case m = 115, d{R) = -115 

'Hu5{x) = x^ + 427864611225600a; + 130231327260672000, 
j{E) = -213932305612800 + 95673435586560V^, 
A= -345 - 23\/5, S = -(19573 + 5290\/5)/4, 
XQ = e^V5tmiV5tm + e^)/10, 

' VQ = {eHl/10)^15e-^ + (-85 + 61^)C 
L = F{tm), M^L (^^15e-i + (-85 + 6lV5)C^^ , 
= (23v^), fM = (92v^)oo2, 

^qj=< fi> X <f2> X <f3>, ^L^< f?,f2,f3>, qJM=<fl,f2,f3>, 
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where fi, f2 and fs are the classes represented by the ideals ((l+3-\/5) /2), (24+ 
23^/5) and (91) and the order of fi,f2 and fs are 132,2 and 2 respectively. 
Since the map ^1 : a ^ a^^ of *p to itself induces an isomorphism of ^/^m 
to Ci(^)/Ci(^^m) and fo = ff is represented by the ideal (423 + 372vfe), we 
have 

Proposition 12. Let & =< fo, f25f3 > O'lT'd D =< f2, fa >• Let Up and Vp 
be the positive integers such that 4p^'' = + llSt^^, {up,p) = 1. Choose 
Sp e {±1} such that epUp = 2-3* mod 5 if the class of p^^ belongs to 
fg® (0 < i < 3). Then we have ap{E) — epUp. 
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